Privacy Policy

PRIVACY POLICY

Last updated: July 20, 2026


1. GENERAL INFORMATION

MAXANDY operates the store and website www.maxandy.store, including the information, content, features, tools, products, and services available, hereinafter referred to as the “Services”.

MAXANDY is supported by Shopify, which provides the technological infrastructure necessary to offer the Services.

This Privacy Policy describes how we collect, use, store, and disclose personal data when you visit the website, make a purchase, create an account, use the Services, or communicate with us.

In the event of a conflict with the Terms of Service, this Privacy Policy prevails with respect to the processing of personal data.


2. DATA CONTROLLER

MAXANDY

Data Controller:
Massimo Gigliotti

Address:
Via Monte Bisbino 70
21042 Caronno Pertusella (VA)
Italy

Email:
maxandyitaly@gmail.com

Phone and WhatsApp:
+39 344 614 2824

Website:
www.maxandy.store


3. PERSONAL DATA PROCESSED

We may collect:

- first and last name;
- email and phone number;
- billing and shipping address;
- country and postal code;
- information relating to orders;
- products viewed, purchased, returned, or refunded;
- payment status and method;
- partial data necessary to identify a transaction;
- account data and preferences;
- communications with customer support;
- photographs and documents submitted;
- IP address;
- device type, browser, and operating system;
- online identifiers;
- pages visited and interactions with the website;
- data collected through cookies and similar technologies.

MAXANDY does not normally directly receive or store the full card number or security code.


4. SOURCES OF DATA

The data may be collected:

- directly from the user;
- automatically through the website;
- through Shopify;
- through payment providers;
- through couriers and logistics partners;
- through distributors or providers responsible for fulfillment;
- through technology providers;
- through advertising or analytics partners, with consent where necessary.


5. PURPOSES OF PROCESSING

We use the data to:

- manage the website;
- create and manage accounts;
- process payments;
- receive and fulfill orders;
- organize shipments;
- handle returns and refunds;
- provide assistance;
- send order-related communications;
- personalize and improve the Services;
- prevent fraud;
- ensure security;
- comply with tax and legal obligations;
- handle complaints and disputes;
- sending promotional communications with consent;
- conducting analytics and advertising with consent when required.


6. LEGAL BASES

Processing may be based on:

- performance of the contract or pre-contractual measures;
- compliance with legal obligations;
- legitimate interest in security, fraud prevention, and service improvement;
- consent for marketing, non-essential cookies, and personalized advertising.

Consent may be withdrawn at any time.


7. DATA DISCLOSURE

We may disclose data, to the extent necessary, to:

- Shopify;
- payment providers;
- couriers;
- distributors and logistics partners;
- IT and security providers;
- email, Live Chat, and support services;
- tax, legal, or accounting advisors;
- analytics and advertising partners, with consent;
- authorities when required by law;
- entities involved in any business reorganization operations.


8. RELATIONSHIP WITH SHOPIFY

Shopify collects and processes personal data relating to access to and use of the Services to provide, protect, and improve its platform.

Data transmitted through the site may be shared with Shopify and its providers, including in countries other than the user's country.

In certain circumstances, Shopify may act as an independent controller for processing activities and purposes determined directly by the platform.

Shopify Consumer Privacy Policy:
https://privacy.shopify.com/it

Portal for managing Shopify data:
https://privacy.shopify.com/


9. MARKETING

With consent, MAXANDY may send information about products, offers, and promotions.

Consent may be withdrawn:

- by using the unsubscribe link;
- by modifying preferences;
- by writing to maxandyitaly@gmail.com.

Revocation does not prevent the sending of necessary communications relating to orders, shipments, payments, returns, or support.


10. COOKIES

The site may use cookies:

- necessary;
- functional;
- analytics;
- advertising;
- personalization.

Cookies that are not strictly necessary are activated only with consent, when required by applicable law.

Preferences can be managed through the banner or privacy panel.


11. INTERNATIONAL TRANSFERS

Shopify and other providers may process data outside the European Economic Area.

Where necessary, transfers are carried out using mechanisms recognized by the GDPR, such as adequacy decisions, standard contractual clauses, or other appropriate safeguards.


12. RETENTION

The data are retained for the period necessary to:

- manage orders;
- comply with tax and accounting obligations;
- provide assistance;
- manage warranties, returns, and refunds;
- prevent fraud;
- protect the rights of the parties.

They are subsequently deleted or anonymized, except where retention obligations are required by law.


13. SECURITY

MAXANDY, Shopify, and suppliers take reasonable measures to protect data from loss, unauthorized access, disclosure, or alteration.

However, no transmission or storage system can guarantee absolute security.


14. MINORS’ DATA

The Services are not intended directly for minors who lack the capacity required to make purchases.

If a parent or guardian believes that a minor’s data have been improperly disclosed, they may contact MAXANDY to request their erasure.


15. DATA SUBJECT RIGHTS

In the cases provided for by the GDPR, the data subject may request:

- access;
- rectification;
- erasure;
- restriction;
- objection;
- data portability;
- withdrawal of consent;
- objection to direct marketing;
- information about automated decision-making.

The data subject may also lodge a complaint with the Italian Data Protection Authority or the competent authority in the European country where they reside or work.


16. EXERCISE OF RIGHTS

Requests may be sent to:

maxandyitaly@gmail.com

We may request information necessary to verify the requester’s identity.

The request will be handled within the time limits established by applicable law.


17. EXTERNAL LINKS

The website may contain links to third-party services.

MAXANDY does not directly control how these parties process data. Users are encouraged to consult the relevant privacy notices.


18. CHANGES

This Privacy Notice may be updated due to operational, technological, legal, or regulatory changes.

The new version will be published on the website with the date of the latest update.


19. CONTACTS

MAXANDY
Massimo Gigliotti

Via Monte Bisbino 70
21042 Caronno Pertusella (VA)
Italy

Email:
maxandyitaly@gmail.com

Phone and WhatsApp:
+39 344 614 2824

Website:
www.maxandy.store